He said: "The one thing we do know is that on the evening of 20 April, there was a sudden catastrophic failure of the casing, the cement or both. Without a failure of one of those elements, the explosion could not have occurred."

Cementing issues being investigated by Transocean include the type of nitrogen-foamed cement used, the volume and the time it was allowed to "cure".

The BP investigation released on 8 September said data from the fateful day suggested that oil and gas had passed through the cement at the bottom of the well, through a device known as a "shoe track" and up the casing.

The cement used was foamed with nitrogen. The BP team criticised providers Halliburton for doing "inadequate lab tests" on the cement mix.

Centralisers

Much has been made in Congressional hearings of the number of centralisers used. These devices make sure that the pipe or casing is centralised during cementing, to ensure a good job is done.

Congressmen say Halliburton recommended that 21 should be used, but BP decided only six should be used.

The BP investigation said the 15 centralisers were ready for use on the rig, but workers wrongly thought they were of a type that would have caused problems. They decided not to use them.

This decision was wrong, but did not contribute to the disaster, the BP team said.

Cement bond log

Because of the importance of getting a good cement job in the well, one that is bonded both to the casing and to the geological formation in which the well is dug, a series of measurements called a "cement bond log" is usually run.

A sonic scanning device is lowered through the well on a wireline. It checks whether there are imperfections in bonding or other problems in the cement. If there are, more cement can be squeezed into affected sections.

Well design

Another issue was the type of casing that would be used on the final, bottom section of the well. BP opted for a single line of casing from the seabed down to the bottom of the well, Congressman say. The more expensive option would have been to use a "liner", a bit of casing hung from the bottom of the casing section above. Inside this would have been a further piece of tubing called a "tieback".

This arrangement would have created more barriers to the upward flow of oil and gas, but it would also have been more expensive.

The BP team found that the suggestion that the firm used the wrong well design by not opting for a "liner with tieback" had no bearing on the disaster.

This option would have guarded against oil flowing up the annulus, the space between the casing and the geological formation. But BP believes it went straight up the casing.

Decisions on the rig

BP's investigation said it took 49 minutes after the first oil and gas flowed up the well before Transocean workers on the rig took action to control the situation. By extension, this suggests that they did not notice until that point that there was a big problem.

The explosion

"It is also clear that the drill crew had very little, if any, time to react. The initial indications of trouble and the subsequent explosions were almost instantaneous."

The surge of gas that reached the surface ignited. Transocean identified two nearby vessels, the rig's own engines and some equipment as the possible source of the accidental ignition.

BP's investigation was unable to ascertain the cause of ignition.

But their team did identify one crucial decision leading to the blast. A worker pressed a button to send the flow from the well to a device called a mud-gas separator, but the valves at various points in the system couldn't deal with the pressure and failed. A cloud of gas was soon all over the ship.

Instead, the gas and oil could have been sent overboard, but that still might not have stopped the gas igniting.

This meant the sensors were active but the alarm would not actually sound, to avoid the crew being awoken at night. Transocean said the setup was standard practice and there were in any case hundreds of other alarms.

In the blast and fire, 11 rig workers died, with more injured. Just over 36 hours later the rig sank.

What is a BOP?

Whatever the exact cause of what happened, it is clear there was some sort of gas-kick and blowout resulting in an uncontrolled upward surge of oil and gas flow to the surface.

The blowout preventer (BOP) is supposed to stop this happening. The BOP, the size of a five-storey building, consists of a series of high-pressure valves, designed to prevent such a surge or kick from damaging the drilling operation.

In this particular BOP, built by US firm Cameron to specifications by Transocean, there are five ram-type preventers and two annular preventers, according to Transocean's chief executive.

The crew on the rig tried to close the BOP manually, but it failed. A "dead man" automatic trigger also failed. And subsequent attempts to close it using remote-operated vehicles did not work.

Why did the BOP fail?

Blowout preventer

Investigations into the US oil spill are focused on the blowout preventer system of valves on the seabed.

The system's control panel is its electronic "brains", keeping valves open to allow flow from well to rig.

In an emergency, hydraulic valves or shear rams should close shut on the pipe, sealing it and preventing flow.

BACK{current} of {total}NEXT

Two possible scenarios have been discussed. One - suggested by Transocean - is that the kick was so catastrophic it pushed fragments of cement debris through the BOP so fast that it was damaged and could not activate.

The sheer force of what happened is indicated by the fact that cement debris travelled all the way up the 5,000ft of riser and on to the deck of the drilling rig.

The other possibility is that the BOP was faulty in the first place.

There were initial allegations that the batteries in a control pod for the BOP may have been flat. Transocean denies this.

The BP investigation team said that one of the control pods did indeed have insufficient charge to activate the BOP. And the other pod had a faulty electrical coil and also could not work.

Workers on the rig had tried to activate the BOP manually but cables from the surface had been damaged.

The last line of defence in a BOP is usually the blind shear ram. This device, activated hydraulically, uses piston-driven blades to cut the pipe, thus stopping the flow.

This did not work. One possible explanation that has been suggested is that the section of pipe it was trying to shear was a section of "tool joint". These joints between the pipes are typically so strong that a blind shear ram cannot deal with them.

The BP probe said this was not the case.

Another possibility is that something in the hydraulic mechanism of the blind shear ram had failed.

The failed BOP was removed from the top of the damaged well on 2 September and brought to the surface two days later.

It is now in the custody of the Deepwater Horizon Criminal Investigation Team and FBI Evidence Recovery Team and will be examined to determine what went wrong.

BBC links

This page is best viewed in an up-to-date web browser with style sheets (CSS) enabled. While you will be able to view the content of this page in your current browser, you will not be able to get the full visual experience. Please consider upgrading your browser software or enabling style sheets (CSS) if you are able to do so.